goquantumcore[.]xyz

This domain, goquantumcore.xyz, was registered on 2026‑04‑17 through PDR Ltd. d/b/a PublicDomainRegistry.com and remains active. DNS resolves to the Cloudflare‑owned IP 188.114.97.3, geolocated to Canada, and the authoritative name servers are leo.ns.cloudflare.com and phoenix.ns.cloudflare.com. The site presents a valid TLS certificate issued by Google Trust Services (WE1) but returns HTTP 403, with the only observed page title “Just a moment…”. The domain is listed on one security blocklist and has been flagged by PhishDestroy, matching its classification as a credential‑phishing campaign. AlienVault OTX includes the domain in a single pulse, providing additional corroboration of malicious use. No malware detections are presently associated with the domain, but the absence of detections does not confirm safety. Current unknowns include the specific phishing payload and targeted victim set, as no landing‑page content has been captured. Defenders should block connections to goquantumcore.xyz, monitor DNS queries for the domain and its IP, and enforce URL filtering to prevent user access. Ongoing monitoring is advised to detect any future changes in content or new indicators of compromise.